Idea Details

Export/Import SM Objects via Shopping Cart in AdminUI

Last activity 06-03-2019 08:36 PM
Josh Coffman's profile image
03-31-2014 05:52 PM

In large SiteMinder implementations, export and import are used extensively to migrate applications from Dev to Test, UAT, and Production environments. Application integrators may not have administrative access to remote desktops on policy servers. This type of access is required to use XPSExplorer, XPSExport, and XPSImport. Navigating the XPS tools and building an xcart to export objects is cumbersome at best, after which, you need to move the xml between servers, and again login to another server via remote desktop to perform the import.

It would be nice if SiteMinder could provide the ability to navigate through objects in the Administrative User Interface, and build a shpping cart of the objects an administrator needs to export. Agents, Agent Configs, EPM applications, Domains, Realms, Rules, Policies, Responses, etc.

Once added to the cart in the Admin UI, an authorized user could then export and download the xml to their workstation. There could be additional security checks to validate whether the user had the ability to export certain types of objects, and whether the export was clear-text or not. The administrative user interface would also provide the ability for authorized users to import the XML into the next environment.

This would be fantastic from a scalability standpoint, as we have teams of people who specialize in application integration, but they do not have direct server access to run the xps tools.


Comments

12-16-2016 03:03 PM

Mark-

 

Thanks for keeping this moving, and adding the functionality to the policy reader tool!

 

While this functionality is useful and appreciated, it does not solve the core problem that integration and development teams typically do not have access to the policy store. This is potentially useful for ops teams migrating infrastructure configs through environments, but it wont be a game changer like having this functionality in the WAMUI would be. WAMUI import/export would allow for a devops/agile type of process to be followed, giving integrators and developers the ability to develop applications, and manage their own Single Sign-On configs throughout the SDLC.

 

I am encouraged that CA is still thinking about this solution, and is at least taking the first step in making this solution a reality.

 

I will download and test the new functionality in the SMPolicyReader tool right away.

 

Thanks,

 

Josh

12-14-2016 02:35 AM

After some internal review of the SMPolicyReader, it was suggested that a good enhancement would be so it could create and edit an xcart selection.   Which would make a nice visual method for creating the xcart items until a more core WAMUP style method comes along, I've put together an article on how to generate an xcart with SMPolicyReader here : 

 

Using SMPolicyReader to generate xcart selection. 

 

And the SMPolicyReader can be downloaded from : 

 

Siteminder Policy Reader 

 

Cheers - Mark

09-06-2016 09:16 AM

Hi, We have moved this into the under review category as we start looking at potential candidates for a future release.

10-09-2015 01:50 PM

Thank you for your contribution of an enhancement idea to the CA Community. CA is continually working to improve its software and services to best meet the needs of its customers. Your input is vital to that effort. The CA Single Sign-On Product Management team has reviewed your enhancement suggestion and decided to maintain the idea for possible consideration in a future release. The Community will continue to be able to vote on this enhancement idea.

04-10-2015 09:46 AM

is this the same as Export/Import using WAM UI

???

07-07-2014 01:34 PM

AdminUI would be first priority,

Rollback would be a distant second, but in the event of some sort of problem, it would still be possible to go in and clean up via the XPSTools. Objects can also be deleted out of the AdminUI, so a manual rollback could be performed there.

API would be third.

06-25-2014 06:01 PM

Thank you for your contribution of an enhancement idea to the CA Community.   CA is continually working to improve its software and services to best meet the needs of its customers.  Your input is vital to that effort.  CA’s Product Management team has reviewed your enhancement suggestion and has decided to maintain your suggested enhancement as a candidate for a future release.   We are asking the Community to continue to offer votes for this suggested enhancement until September 30, 2014.   On that date we will take the suggested enhancements with the highest vote total and determine which of these can move from an “Under Review” to “Planned”.

04-18-2014 04:27 PM

Are there any roll back capabilities you would see essential for this?

Would you want this only being available via the Admin UI or via API or both UI and API? If you had to order these 3 options in priority order which would you place first, second, and third?